Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/3130332e36362e38362e302f32342d3234203d3e20313431313037.roa
File:                     3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (raw, json)
Hash identifier:          Z9sJU9Bq2tA48C6TWKXh5WIRjPN4rgYyPhziWn0DpPQ=
Subject key identifier:   F9:22:AF:54:2D:32:DB:09:9A:6E:E5:6A:9E:9E:CC:2D:77:5D:BD:43
Certificate issuer:       /CN=9F30C5AEBE90852C1E17EBC3A33AF74E0197D181
Certificate serial:       2E0959954366C1EA160C42674930A0496EFACCD5
Authority key identifier: 9F:30:C5:AE:BE:90:85:2C:1E:17:EB:C3:A3:3A:F7:4E:01:97:D1:81
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/3130332e36362e38362e302f32342d3234203d3e20313431313037.roa
Signing time:             Sun 03 May 2026 02:32:31 +0000
ROA not before:           Sun 03 May 2026 02:27:31 +0000
ROA not after:            Sun 02 May 2027 02:32:31 +0000
asID:                     141107
IP address blocks:        103.66.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.crl
                          rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:09:59:95:43:66:c1:ea:16:0c:42:67:49:30:a0:49:6e:fa:cc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F30C5AEBE90852C1E17EBC3A33AF74E0197D181
        Validity
            Not Before: May  3 02:27:31 2026 GMT
            Not After : May  2 02:32:31 2027 GMT
        Subject: CN=F922AF542D32DB099A6EE56A9E9ECC2D775DBD43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:19:3c:59:e7:71:1f:2f:02:2a:1d:43:c6:
                    c7:41:c6:6f:22:c2:f7:20:2b:da:36:12:6c:7f:0f:
                    b5:af:61:11:9b:a3:40:93:8e:2a:58:44:37:46:ca:
                    99:58:08:4b:fb:15:9c:93:da:1c:b0:dc:bb:3f:43:
                    5b:54:fa:81:e8:2e:f1:9c:80:ab:2d:8e:f9:f3:1d:
                    8d:a9:84:4f:4b:6a:b1:d9:71:e3:8e:80:18:b6:df:
                    ba:a9:05:21:69:c5:fb:67:03:65:e3:bd:a6:13:4d:
                    a0:f8:9e:bf:aa:e3:93:68:cc:80:6c:c3:95:81:04:
                    b7:c8:bd:d3:b7:0d:31:ad:b3:71:78:34:3f:85:2b:
                    f3:44:c4:96:5f:18:c1:0a:34:2d:32:25:09:07:c9:
                    14:0d:b0:14:0f:56:39:49:d3:2c:5b:68:20:b2:95:
                    98:e1:c0:0d:b1:b8:9d:bf:d8:57:ce:7b:72:0e:d3:
                    ff:70:c4:08:37:9b:78:23:b2:2b:90:b4:12:fa:1c:
                    ee:22:b7:7e:c2:fe:44:3d:68:77:b7:a7:d0:b3:7d:
                    4a:51:7e:03:0e:fc:ec:e3:d1:fe:96:42:10:1d:ee:
                    ec:23:16:2c:c6:80:f4:7f:24:12:91:98:3e:68:20:
                    a1:03:e3:2c:07:f3:75:20:66:79:31:75:f4:67:f2:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:22:AF:54:2D:32:DB:09:9A:6E:E5:6A:9E:9E:CC:2D:77:5D:BD:43
            X509v3 Authority Key Identifier:
                keyid:9F:30:C5:AE:BE:90:85:2C:1E:17:EB:C3:A3:3A:F7:4E:01:97:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9F30C5AEBE90852C1E17EBC3A33AF74E0197D181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/3130332e36362e38362e302f32342d3234203d3e20313431313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:09:74:ac:ee:c1:fd:cc:e7:a0:56:21:09:ac:09:ba:7c:27:
         a9:d0:6f:0d:cd:93:70:2c:6d:df:e1:50:88:cb:b1:1f:4e:a1:
         60:0a:99:ac:30:a0:99:89:ee:2f:72:e7:cf:21:3b:de:df:51:
         a8:89:c1:a5:c6:c6:ac:15:e4:62:37:6b:f6:83:aa:bc:33:14:
         bc:9c:07:33:d9:bc:35:1f:fc:84:35:e8:f3:30:b9:d4:85:05:
         8d:59:4e:a9:98:1f:55:b6:6c:63:db:3a:d9:57:30:98:cd:f5:
         c7:3c:96:3b:05:19:cc:d3:a8:ff:6d:f8:e6:21:b7:ec:3d:f9:
         14:32:03:fc:d7:2e:08:43:d8:c3:4c:eb:c9:65:e9:6a:4b:3a:
         06:d5:38:7c:8b:55:f9:bf:15:ca:7c:ec:3a:18:8c:df:3e:91:
         60:8d:21:1a:7b:65:dc:5c:2c:14:ae:a5:fa:69:00:ea:03:d2:
         35:b0:6f:c5:2c:26:17:01:bb:68:05:08:4c:12:5d:cf:b5:c4:
         53:dd:60:ee:65:b8:44:7f:29:50:13:72:3f:f7:5b:1a:40:8e:
         1b:76:a4:f3:08:df:4e:5b:db:fc:89:0c:1a:43:fa:7f:61:87:
         27:48:83:1a:27:31:b6:77:79:aa:94:36:fb:16:2c:17:33:bf:
         ba:70:aa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:37 2026 by rpki-client